{
  lib,
  pkgs,
  ...
}:

{
  services = {
    pipewire = {
      enable = true;
      pulse.enable = true;
      jack.enable = true;
      alsa.support32Bit = true;
      wireplumber.enable = true;
    };

    pulseaudio.enable = false;

    fstrim = {
      enable = true;
      interval = "weekly";
    };

    scx = {
      enable = true;
      package = pkgs.scx.full;
      scheduler = "scx_rusty";
    };

    xserver = {
      excludePackages = [ pkgs.xterm ];
      upscaleDefaultCursor = true;
    };

    openssh = {
      enable = true;
      settings = {
        PasswordAuthentication = false; # 禁用密码认证，仅使用密钥
        KbdInteractiveAuthentication = false;
      };
    };

    usbguard.dbus.enable = true;
    udisks2.enable = true;
    speechd.enable = false;
  };
}
